Pedro Marcano
Open to work25 years experienceEnterprise Cybersecurity & Risk Leader
Enterprise Cybersecurity & Risk Leader
Standing Rank
Rank Not Available
Developer Badges
Skills & Technologies
22 skillsGitHub Activity Evidence
GitHub Footprint Not Connected
Recruiters value verified code contributions. Linking a GitHub account displays live heatmaps, active contribution metrics, repository languages, and push activity tags.
Work Experience
INDEPENDENT CONSULTANT
INDEPENDENT CONSULTANT
- Deliver executive advisory, governance, audit, and AI security consulting services to organizations across SaaS, and professional services, helping clients strengthen governance, reduce risk, and prepare for regulatory and certification requirements.
SENIOR SECURITY MANAGER
CHARLES RIVER ASSOCIATES
- Direct enterprise security strategy, governance, and risk frameworks to protect consulting operations, supporting Fortune 100 clients and global law firms.
- Lead data protection, vulnerability management, and privacy assessment initiatives to mitigate risk across systems, networks, and third-party environments.
- Integrate security controls into business processes, including contract reviews and vendor governance, strengthening compliance and accelerating client engagements.
- Advance standardized practices and operational frameworks to sustain security effectiveness within a rapidly expanding organization.
IT SECURITY CONSULTANT
VERNANCE
- Established and scaled independent IT security consulting practice, offering advisory services across infrastructure, systems, and operational environments.
- Assessed client risk exposure and devised tailored security strategies spanning governance frameworks, compliance alignment, control implementation, and policy development.
- Directed engagements across the full project lifecycle, from discovery through remediation and program optimization.
MANAGING PARTNER | CHIEF TECHNOLOGY OFFICER
TAINO CONSULTING GROUP
- Directed assessments across infrastructure, applications, and governance environments to identify gaps and prioritize remediation.
- Served as Strategic Advisor to executive leadership, translating technical risk into business-focused decisions and actionable roadmaps.
Projects
Privacy Program creation and management support
- Designed and advised on an AI-enabled privacy program supporting automated Data Subject Access Requests (DSARs), GDPR compliance, CAN-SPAM requirements, privacy policy analysis, and AI governance controls.
A.I. Audit
- Performed an ISO/IEC 42001 Artificial Intelligence Management System (AIMS) readiness assessment, evaluating governance, risk management, and operational controls in preparation for certification.
ISMS Audit
- Conducted an ISO/IEC 27001 surveillance readiness assessment to validate Information Security Management System (ISMS) effectiveness and certification readiness.
PCI Vulnerability prioritization
- Developed a risk-based vulnerability prioritization strategy aligning CISA's Stakeholder- Specific Vulnerability Categorization (SSVC) model with evolving NIST vulnerability management guidance to improve remediation prioritization for PCI-regulated systems.
SOC2 Audit Support
- Designed a roadmap to modernize SOC 2 evidence collection by integrating AI agents, workflow automation, and continuous GRC processes, reducing manual audit effort while improving evidence quality and audit readiness.
Leaderboard Standings
Leaderboard Position Pending
Global test scores, peer standing percentiles, and algorithm leaderboard ranks are updated dynamically.
Assessment Highlights
Assessments Not Completed
Coding evaluations, system assessment results, and conceptual score badges will appear here after taking a test.
AI Collaboration Score
AI Collaboration Score Pending
Developer coding behavior, assistant cooperation, and AI pair-programming indicators are evaluated during live coding sessions.
Role Compatibility Profile
Role Compatibility Analysis Pending
Custom matching reports, candidate role compatibility percentiles, and core engineer strength profiles are processed once conceptual code screenings are complete.
Achievements
Scaled enterprise security controls
Scaled enterprise security controls to support company growth from $250M to $750M while maintaining ISO 27001, SOC 2, and SOX compliance.
Built IT security consulting practice
Built and executed IT security consulting practice, securing millions in client assets within the first year.
Led 70+ annual client security audits
Led 70+ annual client security audits, improving compliance and preserving recurring and new revenue.
Designed GRC frameworks and metrics dashboards
Designed GRC frameworks and metrics dashboards, enabling actionable oversight for leadership.
Partnered with federal law enforcement
Partnered with federal law enforcement on high-profile forensic investigations, ensuring data integrity.
Directed compliance initiatives
Directed ISO 27001, ISO 27017, and HIPAA compliance initiatives, enhancing organizational readiness and risk posture across multiple industries.
About Details
Professional Bio
Accomplished cybersecurity executive with substantial experience designing, building, and scaling enterprise security functions. Expert in integrating risk management, compliance frameworks, and governance into business operations, supporting global organizations and Fortune 100 clients.
Master of Business Administration (MBA) in Technology Management Concentration
WGU ( - Present)
Master of Science in Cybersecurity & Information Assurance
WGU ( - Present)
Bachelor of Science in Cybersecurity & Information Assurance
WGU ( - Present)